Behavioral task
behavioral1
Sample
de495d20a4365c6bd57e184cdd71d896_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
de495d20a4365c6bd57e184cdd71d896_JaffaCakes118
-
Size
111KB
-
MD5
de495d20a4365c6bd57e184cdd71d896
-
SHA1
bd68e4c31482afd09b65b3356a0793ced8cdce6c
-
SHA256
9868b38094fda62827a595f34bde7422eddc56061909847e8b0e1fd362a6d0d7
-
SHA512
5dd58d2e8202b26cbd79c21429ccda67c316f6bbfbf28402a9aba5fb2bfce4aa0523690acbfdb7bffb24fac502eb5f644ac9624e54fcf1c877969a51ce0886bf
-
SSDEEP
3072:j2HlyhvqFDGg8TWvfwDQfJqdmLYe+vv83I:jclLig8qvoUhcmLYXcY
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de495d20a4365c6bd57e184cdd71d896_JaffaCakes118
Files
-
de495d20a4365c6bd57e184cdd71d896_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 1KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hk82w Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 88KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE